Configuring IP services

To configure IP services, go to Network > Services.

Use this page to control the type of services that may be accessed via Ethernet Ports A and B. For example, if one Ethernet port is connected to a network outside your organization's firewall, and you want to restrict the level of access that external users are entitled to, for example, by disabling FTP access via Port B.

To prevent accidental lock-outs the system does not allow you to disable the service that is currently being used to administer the MCU. For example, if you are configuring the gateway over HTTP and coming in on Port A, then the option to change the HTTP service for Port A will be unavailable in the interface.

Refer to the table below for more details.

In addition to controlling the Ethernet interfaces over which a service operates, this page also allows an administrator to specify the port number on which that service is provided. If the port number for a service is changed, it is necessary to ensure that the new value chosen does not clash with the port number used by any of the other services; it is not, however, normally necessary to use anything other than the pre-configured default values.

The settings on this page apply to both IPv4 and IPv6 addressing. The page displays the IPv4 and/or IPv6 values per port, depending on whether IPv4 and/or IPv6 are enabled for the port. When specifying settings use the appropriate column for the required addressing scheme.

Note that by default SNMP Traps are sent to port UDP port 162 (on the destination network management station); this is configurable. For more information, refer to Configuring SNMP settings.

To reset all values back to their factory default settings, click Reset to default and then click Apply changes.

Field	Field description	Usage tips
TCP service
Web	Enable/disable web access on the specified interface or change the port that is used for this service.	Web access is required to view and change the MCU web pages and read online help files. If you disable web access on both Ports A and B you will need to use the serial console interface to re-enable it. Note that QuickTime uses RTSP by default which is listed as Streaming (other) on the Network > Services page. However, the QuickTime player can be configured to use HTTP (that is it will come from the web service port) instead. If you require advanced security for the MCU, disable web access. If a port is disabled, this option will be unavailable.
Secure web	Enable/disable secure (HTTPS) web access on the specified interface or change the port that is used for this service.	This field is only visible if the MCU has the Secure management (HTTPS) feature key or an Encryption feature key installed. For more information about installing feature keys, refer to Upgrading and backing up the MCU. By default, the MCU has its own SSL certificate and private key. However, you can upload a new private key and certificates if required. For more information about SSL certificates, refer to Configuring SSL certificates. If a port is disabled, this option will be unavailable.
Incoming H.323	Enable/disable the ability to receive incoming calls to the MCU using H.323 or change the port that is used for this service.	Disabling this option will not prevent outgoing calls to H.323 devices being made by the MCU. That is, the MCU will need to dial out to conference participants who are using H.323. If a port is disabled, this option will be unavailable.
Incoming SIP (TCP)	Allow/reject incoming calls to the MCU using SIP over TCP or change the port that is used for this service.	Disabling this option will not prevent outgoing calls to SIP devices being made by the MCU. That is, the MCU will need to dial out to conference participants who are using SIP over TCP. If a port is disabled, this option will be unavailable.
Incoming Encrypted SIP (TLS)	Allow/reject incoming encrypted SIP calls to the MCU using SIP over TLS or change the port that is used for this service.	Disabling this option will not prevent outgoing calls to SIP devices being made by the MCU. That is, the MCU will need to dial out to conference participants who are using SIP over TLS. If a port is disabled, this option will be unavailable.
Streaming (Windows Media Player)	Allow/disable streaming from the MCU to Windows Media Player or change the port that is used for this service.	If a port is disabled, this option will be unavailable. For more information about streaming, refer to Configuring streaming settings.
Streaming (other)	Allow/disable RTSP (Real Time Streaming Protocol) streaming from the MCU to QuickTime or RealPlayer or change the port that is used for this service.	If a port is disabled, this option will be unavailable. For more information about streaming, refer to Configuring streaming settings.
FTP	Enable/disable FTP access on the specified interface or change the port that is used for this service.	FTP can be used to upload and download MCU configuration. You should consider disabling FTP access on any port that is outside your organization's firewall.
ConferenceMe	Enable/disable the ConferenceMe service on the specified interface or change the port that is used for this service. By changing the port, you can block access to the web interface while still allowing users to use ConferenceMe to join conferences.	If a port is disabled, this option will be unavailable. See Using ConferenceMe to join conferences for more information on ConferenceMe.
UDP service
SNMP	Enable/disable the receiving of the SNMP protocol on this port or change the port that is used for this service.	If a port is disabled, this option will be unavailable. If you want to enable the receiving of the SNMP protocol on Port B, ensure that you have the video firewall as an activated feature (refer to Upgrading and backing up the MCU) and you have selected the check box for SNMP on Port B. Note that by default SNMP Traps are sent to port UDP port 162 (on the destination network management station); this is configurable. For more information, refer to Configuring SNMP settings. If you require advanced security for the MCU, disable the SNMP service.
SIP (UDP)	Allow/reject incoming and outgoing calls to the MCU using SIP over UDP or change the port that is used for this service.	Disabling this option will prevent calls using SIP over UDP. If a port is disabled, this option will be unavailable. If you want to allow incoming and outgoing SIP (UDP) calls on Port B, ensure that you have the video firewall as an activated feature (refer to Upgrading and backing up the MCU) and you have selected the check box for SIP (UDP) on Port B.
H.323 gatekeeper	Enable/disable access to the built-in H.323 gatekeeper or change the port that is used for the built-in H.323 gatekeeper.	If a port is disabled, this option will be unavailable. If you want to open Port B for the H.323 gatekeeper, ensure that you have the video firewall as an activated feature (refer to Upgrading and backing up the MCU) and you have selected the check box for H.323 gatekeeper on Port B.
Tunneled media	Enable/disable tunneled media calls to the MCU over UDP	This option must be enabled to allow ConferenceMe to connect over UDP. This option is only available if you have the Web Conferencing feature key installed.

	MCU 4520
	主機: FETMCU03

Configuring IP services

Related topics